5 Applicability in Form

Instructions and help about 5 Applicability In

the statement of applicability is a document that you're often in fact nearly always asked for you're asked for it by the auditors you're going to be asked for it by third party is anybody looking at your system what the statement of applicability is is the list of controls that you are applying into your organization there's a number of different ways that you can come up with it as a minimum you're going to want to do the 114 controls of annex a iso 27002 that forms part of the iso 27001 certification and there may be additional controls that you're going to record on there as well either from other standards um or from your customers from your legal and contractual register that you've recorded earlier but for us we're going to make a start and we're going to make a punt and we're going to say all of the 114 controls that make up part of annex a and we're going to record them now what you're going to find when you do your implementation if you do it without doing it this way is that